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We present a general method to construct fault-tolerant quantum logic gates with a simple 
primitive, which is an analog of quantum teleportation. The technique extends previous results 
based on traditional quantum teleportation (Gottesman and Chuang, Nature 402, 390, 1999) and 
leads to straightforward and systematic construction of many fault-tolerant encoded operations, 
including the tt/8 and Toffoli gates. The technique can also be applied to the construction of remote 
. quantum operations that cannot be directly performed. 

(N ■ 

^ ■ I. INTRODUCTION 

< [ 

I ' Practical realization of quantum information processing requires specific types of quantum operations that may 
be difficult to construct. In particular, to perform quantum computation robustly in the presence of noise, one 
needs fault-tolerant implementation of quantum gates acting on states that are block-encoded using quantum error 
correcting codes Fault-tolerant quantum gates must prevent propagation of single qubit errors to multiple 

qubits within any code block so that small correctable errors will not grow to exceed the correction capability of 
the code. This requirement greatly restricts the types of unitary operations that can be performed on the encoded 
^| ' qubits. Certain fault-tolerant operations can be implemented easily by performing direct transversal operations on 
the encoded qubits, in which each qubit in a block interacts only with one corresponding qubit, either in another block 
or in a specialized ancilla. Unfortunately, for a given code, only a few useful operations can be done transversally, 
and these are not universal in that they cannot be composed to approximate an arbitrary quantum circuit. To obtain 
a universal set of gates, additional gates have to be constructed using ancilla states and fault-tolerant measurement. 
Qh, Although these additional gates have been constructed successfully (j],|3|||[| , their ad-hoc construction is complicated 
and is not easily generalized. 

Another kind of application in which we are challenged to construct useful quantum operations from a limited 
set of primitives is in distributed quantum information processing. In this problem, certain kinds of communication 
between different parties are constrained or prohibited, but prior distribution of standard states may be allowed. For 
example, quantum teleportation demonstrates how an unknown quantum state can be sent between two parties 
without sending any quantum information, using only classical communication and prior entanglement. Protocols 
for distributed state preparation and computation are also known J§|, but again, they have been largely constructed 
by hand and offer neither an explanation of why a particular ancilla state is required nor a systematic path for 
generalization. 

A general framework for addressing such problems has been presented in j^]; it uses quantum teleportation as 
a basic primitive to enable construction of quantum operations that cannot be directly performed through unitary 
operations. This framework provides systematic and generalizable construction for an infinite family of fault-tolerant 
gates, including the tt/8 and Toffoli gates. It does not, however, lead to circuits equivalent to (or as simple as) prior 
ad-hoc construction for the same gates. 

In this paper, we provide an extension to the teleportation method of gate construction with a similar but simpler 
primitive, which we call "one-bit teleportation" because it uses one qubit instead of two as ancilla. This method 
simplifies the construction of H and, furthermore, provides strikingly unified construction of the tt/8, controlled- 
phase, and Toffoli gates. An infinite hierarchy of gates, including the controlled rotations diag(l, 1, 1, e l27T ^ 2 ) used in 
the quantum factoring algorithm , can be constructed with the present scheme. 
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The structure of the paper is as follows. First, in Section B we define one-bit teleportation, and describe its 
properties and various guises. Its application to fault-tolerant gate construction is presented in Section |ll], which 
is followed in Section IV with specific circuits for the 7r/8, controlled-phase, and Toffoli gates. In Section [v|, we 
describe the use of one-bit teleportation to derive the two-bit quantum teleportation protocol and to construct a 
remote quantum gate. We summarize our results in Section VI. 



II. ONE-BIT TELEPORTATION 



In standard quantum teleportation, Alice performs a joint measurement of the unknown qubit and some ancilla, 
and sends the classical measurement outcome to Bob, who subsequently reconstructs the unknown state. No quantum 
operation is performed jointly by Alice and Bob, but they need a certain fwo-qubit entangled ancilla state. (We refer 
to any state other than the original unknown qubit state as ancilla state.) The same objective, communicating a 
qubit, can be accomplished in a simpler manner if Alice and Bob are allowed to perform a quantum gate (such as 
a controlled-NOT gate, a CNOt) between their respective qubits. In this case, only a single qubit ancilla in Bob's 
possession is required. We call such a quantum circuit one-bit teleportation, which can be derived using the following 
facts: 



Fact 1: An unknown qubit state 
in the following circuit: 



can be swapped with the state |0) using only two CNOT gates, as shown 



|0> 



|0> 



(1) 



Note that in all circuits we show, time proceeds from left to right as is usual, and conventions are as in [p_ 2| - 
Throughout this section, the first and second qubits refer to the registers with respective initial states |0) and 



• Fact 2: X = HZH, where X and Z are Pauli operators, and H is the Hadamard gate defined as 



H 



1 
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Then Eq. ([j]) is equivalent to the following circuit: 

-Hp \Z[ 



H 



(3) 



H 



• Fact 3: A quantum-controlled gate can be replaced by a classically-controlled operation when the control qubit 
is measured. 



U 



U 



(4) 



The meter represents the measurement of Z, which projects the measured state onto |0) or |1). The double line 
coming out of the meter carries the classical measurement result, and U is performed if the measurement result 
is |1>. 

In Eq. (||), the two qubits are disentangled before the second Hadamard gate. Therefore, the second qubit can be 
measured before the second Hadamard gate without affecting the unknown state in the first qubit. Applying fact 3 
to Eq. (H) results in the following circuit: 



2 



|0)—©- 
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H 



The circuit in Eq. (0) uses a CNOT and only one qubit for the ancilla. Therefore it is a one-bit teleportation circuit, 
which we refer to as "Z-teleportation" because a classically-controlled- Z is applied after the measurement. 

Using Z-teleportation we can derive other one-bit teleportation circuits. For instance, the following circuit first 
teleports the state H\ip) using Z-teleportation, and then applies H t = H to the teleported state H\tp) to obtain the 
original state 



10) 



IV) 
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H 



Z — H 



(6) 



H 



This circuit can be simplified to 



|0) 



H 



X 



(7) 



which we refer to as "X-teleportation" . Similarly, we can derive other one-bit teleportation circuits as discussed in 
Appendix |A|. We will focus on X and Z-teleportation circuits because they are sufficient for our construction in this 
paper. 

X and Z-teleportation circuits can both be represented using the same general structure: 



10) 

IV) 



A 



E 



D 



B 



(8) 



where the first qubit (the ancilla qubit) is initially in the |0) state. For Z-teleportation, A = / (I is the 2x2 identity 
operator), B = H, D = Z, and E is a CNOT with the first qubit as its target. For X-teleportation, A = H,B = I,D = 
X, and E is a CNOT with the first qubit as its control. 



III. FAULT-TOLERANT GATE CONSTRUCTION USING ONE-BIT TELEPORTATION 

In this section, we develop a general method for fault-tolerant gate construction using one-bit teleportation as a 
basic primitive. We will confine our attention to the Calderbank-Shor-Steane (CSS) codes that are doubly even and 
self-dual , although the results can be extended to any other stabilizer codes || • 



A. Fault-tolerant gate hierarchy 

We first summarize the fault-tolerant gate hierarchy introduced in S. Let C\ denote the Pauli group. Then for 
k > 2, we can recursively define Cfc as 

C k = {U\UC x U^ CCn}. (9) 

For every k, Ck D Cfc-i, and the set difference Ck\Ck-i is nonempty. For instance, diag(l, e i2 ' r / 2L ) g Ck\Ck-i- 

C<i is a group called the Clifford group ||, which is the set of operators that conjugate Pauli operators into Pauli 
operators. Besides the Pauli operators, C2 also contains other important gates, such as the CNOT, H , and the phase 
gate S (defined by S\x) = i x \x) for x G {0, 1}). For doubly even and self-dual CSS codes, any encoded C2 gate has 
transversal unitary implementation [l]Jq|, which is fault-tolerant. 
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C2 gates alone, however, are not sufficient for universal quantum computation An additional gate outside C2 is 
necessary and sufficient to complete universality In particular, adding any one of the following gates in (7 3 \C2 
to the Clifford group results in a universal set of unitary operations: the 7r/8 gate T(T\x) = e l7TX ^ 4 \x) for x g {0, 1}), 
the controlled-phase gate Ai(S') (ki(S)\xy) = i x ' v \xy) for x,y = {0, 1}), and the Toffoli gate (controlled-controlled- 

NOT) |@|. 

The construction of an encoded operation in Cs\C2 is much more complicated than that of an encoded operation in 
C2, and requires quantum measurement and a particular ancilla state. But applying a C^\C2 gate to certain known 
states can be replaced by direct preparation of the final states, which can be relatively easier as stated in the following: 
Theorem 1: Let U be an n-qubit gate in C3. Then the encoded state U(\0)® n ) can be prepared fault-tolerantly by 
applying and measuring C2 operators. 
Proof: See Appendix |B]. 

Since C3 is closed under multiplication by elements in C2 p9| , Theorem 1 is also applicable when |0)® n is replaced 
by l/(|0)® n ) for V e C 2 , because U\ip) = C7V(|0)® n ) with UV € C 3 . We will use Theorem 1 in our fault-tolerant logic 
gate construction. 



B. Cs gate construction using one-bit teleportation 



We now consider a general method of constructing fault-tolerant gates in C3 using the one-bit teleportation scheme 
as a primitive. The basic idea is the following. To apply the encoded operation U to an encoded state \ip), we can 
first teleport \ip) by either X or Z-teleportation, and apply U to the reconstructed |?/>). The extra teleportation step 
can be done fault-tolerantly because both X and Z-teleportation use C2 gates only. It further reduces the problem 
of fault-tolerant construction of a quantum logic gate to fault-tolerant preparation of a particular ancilla state. The 
reason for the reduction is that U is applied to the ancilla, which is originally in the known state |0). If U can be 
commuted backwards until it is applied to a known state without introducing more complicated gates, we can prepare 
the resulting known state, without applying U directly, as the input ancilla. Using such an ancilla, the reconstructed 
state after the modified one-bit teleportation circuit will be U\ip). That is, the encoded U has been applied to the 
encoded fault-tolerantly. 

We now detail the formal construction. Let U € C3 be an n-qubit gate to be applied to an encoded quantum 
state with n logical qubits. We first teleport each logical qubit using either X or Z-teleportation such that \ip) is 
reconstructed in the ancilla, which is initially in the |0)® n state. We then apply U to the reconstructed \ip) to obtain 
U\tj)). This is described by the following quantum circuit: 



|0)« 



A 



E 



D 



U—U\i>) 



(10) 



B 



In Eq. ([l0|), a register (wire) with the symbol "/"" represents a bundle of n logical qubits. A is a bitwise operation, 
A = A\ ® • • • ® A n , where Ai acts on the i th logical qubit only. B is a bitwise operation similar to A. E is a tensor 
product such that E — Ei <£> • • • <£> E n , where each Ei is a CNOT between the i th logical qubits of \ip) and the known 
ancilla. The measurement box measures Z bitwise and the double line represents the n-bit classical outcome. The i th 
classical bit controls whether an operator Di is performed on the i th logical state in the first register. This is denoted 
by D for the sake of simplicity. 

According to Sec. 0, if Z-teleportation is applied to the i th logical qubit, A{ = I,Bi = H, Di = Z, and Ei is a 
CNOT with the first qubit as its target; if A-teleportation is applied instead, Ai = H,Bi = I, Di = X, and JSj is a 
CNOT with the first qubit as its control. 

We now commute U backwards in time. Commuting U with the classically-controlled operation D changes D to 
UDW '. As D 6 C\ and U € C3, UDW <E C2 can still be performed transversally. Likewise, commuting U with E 
changes E to UEW fio|| . As CNOT ^ C\, the resulting operation UEU^ may not be in C2 for an arbitrary U 6 C3. To 
ensure UEW G C2, we only consider U that commutes with E such that UEW = E € Ci- Then Eq. ( |l0| ) becomes 
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UDU^ 



U\i>) 



(11) 



B 
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All the circuit elements outside the clotted box can be performed fault-tolerantly. Therefore, if we can prepare the 
input ancilla in the state UA(\0)® n ), we can apply U £ C3 to any encoded state \ip) fault-tolerantly. As A £ C2, UA 
is also a C3 operation. By Theorem 1, the ancilla state UA(\0)® n ) can be created fault-tolerantly. The stabilizers of 
such an ancilla state, which will be measured in preparing the state, can be easily derived. Recall that when Ai = I, 
Di = Zi, and when Ai = H, D l = X. t . Therefore, AiZiA] = D t is always true Q, and the stabilizers of UA(\0)® n ) 
are UAiZ^W = UD t W £ C 2 . 

Using the above method, we can systematically construct interesting gates in Cs\C2, including the 7r/8, controlled- 



phasc, and Toffoli gate, as will be shown in Section [V 



Finally, we remark that the C3 gates commuting with E are not the only gates that can be performed by the 
one-bit teleportation scheme. Any C3 gate of the form U = GbVG a for V commuting with E and G a ,Gb € C2 can 
be performed using the generalized one-bit teleportation circuits. We discuss this in Appendix |X| 

C. Recursive construction 

In this section, we extend our discussion to the gates in Ck and characterize a class of gates that can be recursively 
constructed with one-bit teleportation as a basic primitive. 

We prove by induction that the diagonal subset of Ck, defined by Fk = {U € Cfc and U is diagonal}, can be 
recursively constructed. 

First, when U £ Fk, we choose to apply X-teleportation to each logical qubit. In this case, each Ei is a CNOT 
taking the i th logical qubit in the ancilla as the control bit. Therefore, E commutes with U and Eq. ( O ) holds with 
Ai = H } Bi = I and D t = X l for i = 1, . . . , n. Second, since for U £ F k and P £ C x , UPW = UP for some 
U £ Fk-i [[l9]], UDiU^ = UXiU^ = U x Xi for some U x £ Fk-i- Therefore, if the gates in Fk-i can be performed, the 
classically-controlled operation UDiW for U £ Fk can also be performed. Third, the required ancilla {/lf® n (|0)® n ) 
can be prepared fault-tolerantly with recursive construction as shown in Appendix |b|. Finally, the gates in F2 C C2 
have transversal implementation. By induction, all the gates in F/~ can be performed fault-tolerantly with recursive 
application of the one-bit teleportation scheme. 

The sets Fk contain many interesting gates, such as V k = diag(l, e"/ 2 ), which are the single qubit 7r/2 fc rotations, 
and AifV^- 1 ) = diag(l,l,l,e i7r / 2 ), which are the controlled rotations used in the quantum Fourier transform 
circuit |Tl] J2p[| essential to Shor's factoring algorithm JO]. Fk also includes the multiple-qubit gates A n (V l ) for 
n + I < k E9|, where A n (V l ) applies V 1 to the (n + 1) qubit if and only if the first n qubits are all in the state 
|1). By the closure property of Fk [l£(] , all products of A n (V l ) for n + I < k are in Fk- To perform gates in Fk for k 
small, the recursive construction we have described can be more efficient than approximating these gates to the same 
accuracy using a universal set of fault-tolerant quantum logic gates. 

The gates in Fk are not the only ones that can be constructed using the one-bit teleportation scheme. For instance, 
if U £ Ck is related to an element in Fk by conjugation with Hadamard gates in the i* , . . ., if 1 qubits, E can be made 
to commute with U by applying Z teleportation to the i\ , . . ., if 1 qubits and X-teleportation to the rest. The Toffoli 
gate is an example. More generally, any gate that is a product of C2 gates and a single Fk gate can be constructed 
recursively. 

IV. EXAMPLES 

In this section, we systematically construct three important fault-tolerant gates in C^\C2 using the general method 



described in Sec. III. Any one of these gates, together with the Clifford group, forms a universal set of gates. For 
each of the construction, we will derive the required circuit and the ancilla. The ancilla can always be prepared 
fault-tolerantly (see Appendix |b]) . 

A. The tt/8 gate 



The 7r/8 gate, T, has the following matrix representation: 



T = 



1 

e"/ 4 



(12) 



5 



As T is diagonal, following the recipe in Sec. Ill, we choose to apply A-teleportation to \ip) and apply T to the 
teleported lip): 



|0) — H 



X 



T\iP) 



(13) 



® — EE 



We commute T backwards using two facts. First, TXT^ = e~ l7T / 4 SX, where the phase gate S is defined in Sec. Ill A. 
Second, T commutes with the CNOT by construction. Thus, we obtain a circuit to implement the it/ 8 gate (where an 
irrelevant overall phase has been ignored): 



10} 



H 




T 


— • 


SX 







(14) 



All the circuit elements outside the dotted box can be performed fault-tolerantly. The dotted box, then, can be 
replaced by an ancilla in the state 



|0+) = TH\0) 



|0) +e" r / 4 |l) 

71 



(15) 



which can be prepared fault-tolerantly as described in Appendix [b|. Thus, we have derived a circuit and the corre- 
sponding ancilla for performing the fault-tolerant ir/8 gate. We note that this re-derives the same circuit and ancilla 
state used in || . 



B. The controlled— phase gate 



The controlled-phase gate Ai(5) (defined in Sec. Ill A) is in C3, and forms a universal set of gates |1£]:|12|] together 
with H and CNOT. 

We use the following circuit symbol for Ai(5): 



Ai(5) commutes with and conjugates Xj (i — 1,2) as follows: 



f^ 7 ] — py] — — 



(16) 



(17) 



ZHI 




X 



(18) 



where the controlled-Z operation, A±(Z), acts on basis states as A±(Z)\x)\y) = (— l) x ' v \x)\y). To construct Ai(5), 
we first teleport the two-qubit state \ip) and apply Ai(5). This linear transformation preserves phase coherence, and 
thus, it suffices to consider its action on the basis states \xy). Since Ai(5) is diagonal, we apply A-teleportation to 
both qubit states such that the CNOTs in the circuit commute with Ax (S). 
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\y) 
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X 



\x) 



(19) 
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Commuting Ai(S) backwards using the commutation rules in Eqs. (|T^-(|l8|), we obtain a circuit for the controlled- 
phase gate: 
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— i x - y \y) 



(20) 



-e- 



where the double lines control all the operations in the corresponding boxes. All the circuit elements in Eq. (|2C|), 
except those in the dotted box, can be performed fault-tolerantly. Finally, we can replace the dotted box by an input 
ancilla in the following state: 



\<f>+) =AiOS)(fli®fla)|00> 

= -(|00) + |01) + |10)+»|H)) 



(21) 
(22) 



which can be prepared fault-tolerantly. This completes the requirement for performing the controlled-phase gate 
fault-tolerantly. 



C. The Toffoli gate 

To construct the Toffoli gate (controlled-controlled-NOT) , we begin with some useful commutation rules: 



X 



-©- 
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(23) 



-Eh 



(24) 



As in the controlled-phase gate construction, we demonstrate the construction on basis states \xyz) for three qubits. 
We first teleport \xyz) and then apply a Toffoli gate. Since the Toffoli gate is diagonalized by a Hadamard transform 
on the target qubit, the choice of X-teleportation for the control qubits and Z-teleportation for the target qubit 
ensures that the three CNOTs commute with the Toffoli gate. 
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(25) 
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Commuting the Toffoli gate backwards to the far left using Eqs. (p3|)-(p^), Eq. (^5|) is equivalent to 



0)^ 



Iff) 

2 ffl xy) 



(26) 



All the circuit elements except those in the dotted box can be performed fault-tolerantly. It remains to prepare the 
state created in the dotted box, 



!>+) = U(Hi ®H 2 )\000) 
= |(|000> + 1010) 



|100) + |m>) 



(27) 
(28) 



where U denotes the Toffoli gate. Again this ancilla state can be prepared fault-tolerantly, as described in Appendix [Bj. 

The ancilla and the quantum circuit derived here are the same as those in Shor's original construction The 
one-bit teleportation scheme elucidates the choice of the ancilla state and the procedure in [fjj . 



V. REMOTE GATE CONSTRUCTION USING ONE-BIT TELEPORTATION 

The one-bit teleportation scheme, in addition to being useful for fault-tolerant gate construction, can also be used 
to design a variety of remote quantum operations. Constructing remote quantum operations is related to constructing 
fault-tolerant gates in that both require a particular ancilla state to replace a prohibited operation. In this section, 
we use one-bit teleportation as a basic primitive to derive the quantum circuits and the required ancilla states for the 
two-bit quantum teleportation and the remote CNOT. 



A. Two-bit teleportation 

Suppose Alice needs to send a qubit state \ip) to Bob. Direct quantum communication is not allowed, but Alice 
and Bob can share some ancilla state. The question is, how can Alice send to Bob? A well-known solution 
to this problem is quantum teleportation 0], which uses an EPR state and classical communication. Using one-bit 
teleportation, we give an alternative derivation of the required (entangled) ancilla and the required teleportation 
circuit. 

We first construct a circuit to send the unknown state with a prohibited operation. Then we remove the requirement 
of such a prohibited operation. Let be the state to be communicated from Alice to Bob. Alice can send to 
Bob by applying one-bit teleportation twice. Step 1: Alice swaps \ip) with an ancilla |0) using A-teleportation. Step 
2: Alice sends the teleported \ip) to Bob using Z-teleportation (with a prohibited CNOT in this step). The circuit 
representation for the process is 



B{\ 



-e- 



(29) 



The prohibited operation (cnot), which is marked by an asterisk, can be commuted backwards using the commutation 
relation: 
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X 



-Sr- 



This leads to the usual quantum teleportation circuit 
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(30) 




(31) 



In Eq. (j3l|), the prohibited CNOT acts on the known state inside the dotted box, which can be replaced by the following 
state it creates: 



= A 1 (X)# 1 |00) = i=(|00> + |ll>) 



(32) 



In other words, if Alice shares this entangled state with Bob, the state \ifj) can be sent to Bob without quantum 
communication. 

Note that the classically-controlled- A on the second register only affects its overall sign, and can be omitted since 
the second register is subsequently measured. 

An alternative circuit, which accomplishes the same task, can be derived when Z and A-teleportation are used for 
the two steps instead. We start with the following circuit: 



H 



-e- 



-i- 
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H 



(33) 



X 



Using the commutation rule 



(34) 



we can commute the prohibited CNOT backwards to obtain an equivalent quantum teleportation circuit 




(35) 



The disallowed element in the dotted box can be replaced by the EPR state of Eq. (|3^) . The irrelevant classically- 
controlled- Z on the second register can be omitted. 

The two-bit teleportation circuits of Eqs. ([H]) and (|3^) are equivalent to that in pl[ , but as mentioned above, they 
are derived differently. 



B. Remote CNOT 



Suppose Alice and Bob have in their possession quantum states \a) and \/3), respectively. How can they perform a 
simple distributed computation, a CNOT from \a) to without communicating any quantum information between 
them, but perhaps with the aid of some initially shared standard quantum state? A solution to this problem is given 
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in [H|. The ad-hoc method employed, however, does not suggest a systematic technique for deriving the solution, or 
solutions to generalized versions of this problem. Here, we use one-bit teleportation to present a general technique 
and derive a different circuit that accomplishes the same task. 

Alice and Bob first swap their states with their respective ancilla state |0) by one-bit teleportation, and then apply 
a prohibited CNOT. The quantum circuit is chosen so that Alice uses X-teleportation and Bob uses Z-teleportation: 




H 



B< 



l/?> 
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X 



H — 



(36) 



« — |/3 ©a) 



The prohibited CNOT can be commuted backwards to obtain a remote CNOT circuit: 




(37) 



The prohibited operation in the dotted box is applied to a known state, and can be replaced by the EPR state of 
Eq. (p2). Provided such a shared entangled state is initially available to Alice and Bob, they can perform a remote 
CNOT operation using two bits of classical communication. 

Note that a remote CNOT can also be constructed by using two-bit teleportation twice in an obvious way: Bob first 
sends his qubit \j3) to Alice with two-bit teleportation, and then Alice applies CNOT to |a)|/3) and sends the qubit 
\ol ffi 0) to Bob with two-bit teleportation. Such construction, however, requires two pairs of maximally entangled 
state and four bits of classical communication, which is twice that required for the one-bit teleportation scheme. 

Our remote CNOT construction in Eq. (p7|) is different from that in j^] , which can also be derived using the one-bit 
teleportation scheme, as described in Appendix 

Finally, we remark that the two examples of constructing remote operations strengthen the concept of teleporting 
quantum logic gates with one-bit teleportation, as we have shown that if the input ancilla is a special state related to 
the CNOT gate, the reconstructed state is the one to which a CNOT gate has been applied. 



VI. CONCLUSION 



We have presented a systematic technique to construct a variety of quantum operations, by using a primitive one-bit 
teleportation scheme. Such a scheme reduces the problem of constructing a quantum logic gate to preparing an ancilla 
state created by the same gate applied to a known state. The usefulness of this technique is particularly manifest for 
two kinds of application: fault-tolerant quantum computation and remote quantum computation, as demonstrated in 
our construction of the tt/8, controlled-phase, and Toffoli gates, and the remote-CNOT. With recursive application of 
the one-bit teleportation scheme, we can also construct an infinite hierarchy of gates fault-tolerantly. 

The idea of teleporting quantum logic gates has been used in ||, with two-bit teleportation as a primitive, to 
perform universal quantum computation. The two-bit teleportation scheme allows all C3 gates to be teleported 
fault-tolerantly, and all gates to be teleported with recursive application of the scheme. For one-bit teleportation, 
however, we can only provide sufficient conditions for gates in C3 to be teleportable, namely, any C3 gate that can be 
written as a product of C2 gates and a single C3 gate that commutes with CNOT. It is not known if this includes all 
the C3 gates. The difficulty in describing the exact set of one-bit teleportable C3 gates arises from the requirement for 
a C2\C\ gate in the one-bit teleportation circuit. Such a C2\C\ gate may be conjugated outside C2 by a C3 gate, and 
therefore cannot be directly performed fault-tolerantly. This places further constraint on the teleportable U € Ck for 
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k > 3. Because of our present lack of understanding of the general structure and nature of Ck gates, the distinction 
between the ultimate capabilities of the one and two-bit teleportation schemes remains an interesting and difficult 
open question. 

Nevertheless, as we have shown, one-bit teleportation can provide much simpler protocols than two-bit teleportation 
in constructing quantum logic gates. This is because one-bit teleportation only requires projective measurement of Z 
and as many ancilla qubits as the state to be transformed; two-bit teleportation, however, requires Bell measurement 
and twice as many ancilla qubits as the original state. 

At a very general level, the logical gate teleportation schemes reduce the difficulty of constructing quantum logic 
gates by using special ancilla states. This can be useful not only for simplifying hardware requirements, but also 
for designing and optimizing computation and communication protocols ]2^]23[ ]. Even more intriguing, perhaps, is 
that this result gives us a first glimpse at what might someday be a standard architecture for a quantum computer: 
a simple assembly of one-bit teleportation primitives, capable of universal quantum computation on quantum data, 
given the assistance of standard quantum states that are obtained as commercial resources. The definition of such a 
stored-program architecture could be pivotal in the development of this field, much as the von Neumann or Harvard 
architecture were important in classical computation. 
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APPENDIX A: GENERALIZATIONS OF THE ONE-BIT TELEPORTATION CIRCUITS 



The one-bit teleportation circuit used in fault-tolerant gate construction has three components: a particular input 
ancilla, a sequence of Ci gates, and finally the measurement and classically-controlled operation. The teleportability 
of one-bit teleportation is governed by the sequence of C2 gates before the measurement. Using the X and Z- 
teleportation circuits of Eq. (^) , any U £ C3 that commutes with E can be teleported. In this appendix, we derive 
other one-bit teleportation circuits, which use different Ci gates, and then discuss their application in constructing 
fault-tolerant gates. 

By teleporting G\ip) using X-teleportation and applying G^ to the teleported G\i/j), we obtain the following gener- 
alized one-bit telelportation circuit: 





• — 






G^X® n G 







m -f— g — & 



(Al) 



When G 



and H 



011 



Eq. (Al) reduces to the X and Z-teleportation circuits. 
In Sec. fll, we showed that all the operations in F3 can be performed fault-tolerantly using Y-teleportation. Here, 
we generalize the result to show that, if U € C3 and U — GbVG a , where V £ F3 and G a ,Gb € C2, then U can be 
performed fault-tolerantly using the ge neral one-bit teleportation scheme by the following procedure: 

Step 1: Using the circuit of Eq. (Al) with G — G a , we first teleport the state \ip) to the ancilla initialized in the 
state |0)® n , and then apply U to the ancilla. This can be represented by 



W -f- G a 



-e- 



G+ G\X® n G a G b VG a — U\i/>) 



(A2) 



Step 2: Commuting U backwards, one obtains 
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|0)« 



JJ®n — y 



W ~F~ G a 



~G b ~\ G b VX® n ViGl U\ip) 



(A3) 



Note that the new classically-controlled operation is GbV X® n V^ G b , which is in C 2 because VX® n V^ € C2. Therefore, 
all the circuit elements can be performed fault-tolerantly, except those in the dotted box, which can be replaced by 
an ancilla in the state VH® n (\0)® n ). 

There are C3 gates that cannot be constructed using X and Z-teleportation directly, but can be constructed using 
other one-bit teleportation circuits. For instance, the controlled-Hadamard gate Ai(H 2 ) € C^\C 2 does not commute 
with E in Eq. ( |Io| ) for all possible combinations of X and Z-teleportation circuits, but Ai(H 2 ) can be written as 
G b VG a with G a = Q\, G b = A 1 (X 2 )Q 2 and V = T x Ai(5|), where Q = S*>HS G C 2 . Thus, Ai(iJ 2 ) can still be 
performed using the general one-bit teleportation scheme. 

We remark that a C3 gate U = GbVG a with G a ,Gb € C 2 and y € can be performed indirectly by applying 
G a ,V and Gf, in sequence, where V is applied by A-teleportation. If the operations in the generalized one- bit 
teleportation circuit, Gb,A\(X), and G a of Eq. (A3), are also considered, the total requirements to perform U by 
such indirect implementation and by direct one-bit teleportation are almost the same. But if we are given different 
one-bit teleportation circuits as primitives, we can use them to directly teleport different sets of C3 gates. In other 
words, if we are given the circuit of Eq. (11), using an input ancilla in the state UA(\{))® n ), we can teleport U € C3 



that commutes with E; if we are given the circuit of Eq. (A3), using an input ancilla in the state V7J® n (|0)®"), we 



can teleport U in the form of GbVG a . In this sense, then, the generalized one-bit teleportation circuits are interesting 
and allow more gates in C3 to be teleported directly. 



APPENDIX B: FAULT-TOLERANT STATE PREPARATION 



In this section, we first prove Theorem 1 in Sec. Ill A by construction. We then show how to create the three ancilla 



states in Sec. [V fault-tolerantly. Finally, we explain how to prepare a class of encoded quantum states fault-tolerantly 



by recursive application of the one-bit teleportation scheme. 



1. Fault-tolerant preparation of quantum states 

A stabilizer of a quantum state is a quantum operator that transforms the state to itself. Let C be the codeword space 
corresponding to an [[m, n]] stabilizer code, which encodes n logical qubits using m physical qubits. The stabilizer 
S of C is an Abelian subgroup of the Pauli group, or C\, such that \ip) € C if and only if VM 6 S, M\%jj) — \^p). By 
performing error correction for the stabilizer code, we can project an arbitrary state onto an encoded state in C 

The stabilizer S has 2 m ~ n elements generated bym-n independent operators in C\, and defines a quantum code 
of dimension 2™. Each encoded state is, then, determined by n extra independent stabilizers. (In the following, 
we will restrict our discussion to the codeword space and exclude the stabilizers of the code from the stabilizers of 
an encoded state.) For instance, the encoded |0)®" is determined by Z% for i = 1, . . . ,n, where Z\ is the encoded 
Z on each logic qubit. In general, stabilizers need not commute with one another and need not square to the 
identity. But an independent set of stabilizers can always be chosen to be a mutually commuting set of elements 
that square to the identity. This is because = U(\0)® n ) for some encoded U, leading to a possible choice 
St(|-0)) = {UZi~U\i — 1, . . . , n} with the desired properties. We restate the above as a lemma: 

Lemma 1: For any |^), St(|^>) can be chosen such that VM, N € St(|^)), (a) M 2 = I and (b) [M, N] = MN—NM = 
0. 

Note that the elements in St (| ?/>)) are all valid encoded operations, and their actions preserve the codeword space. 

As a quantum state is the simultaneous +1 eigenstate of its stabilizers, the state can be prepared by projecting an 
arbitrary encoded state onto the simultaneous +1 eigenstate of its stabilizers. In the following we will show how to 
create a class of quantum states fault-tolerantly by measuring their stabilizers. 

Given a quantum state encoded with an [[m, n]] stabilizer code, the operator M € C 2 with M 2 = I can be 
measured fault-tolerantly on as follows. First, we prepare a cat state 

|cat)^i=(l 5 > + |l»> ( B1 ) 
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where \i) consists of m physical qubits in the state |i) (i = 0, 1). (The cat state cannot be created fault-tolerantly, 
but it can always be verified H.) For the doubly even and self-dual CSS codes, the encoded M G C 2 can be written 
as M = M 1 £g> • • • £g> M m , where M J acts only on the j th physical qubit of each block of the encoded state For 
each j, we perform controlled- M J with the j th qubit of the cat state as the control bit and the j th qubit of as the 
target qubit. Effectively, a cat-state-controlled-M is applied to the state |cat)|^} with transversal operations leading 
to the state 

-L|0>|V>> + -J=|1)M|V>> (B2) 

= ~(|0) + |1»(J + MM + |(|0> - |1»(J - MM . (B3) 

Note that as M 2 = I, (J± M)\ip) are ±1 eigenstates of M for any 

We can measure the cat state fault-tolerantly using the procedure described in jl],|| to distinguish |0) + |1) from 
|0) — 1 1). (We omit the unimportant normalization factors.) If we obtain |0) + |1), the encoded state is projected onto 
(I + M)\tjj}, the +1 eigenstate of M; otherwise the resulting encoded state is (/ — M)\ip), the —1 eigenstate of M, 
which may be transformed to a +1 eigenstate of M by the following Lemma. 

Lemma 2: If M £ C 2 , M 2 = I, and there exists Q £ C 2 such that {M, Q} = MQ + QM = 0, then we can always 
transform an arbitrary encoded state \ip) onto a +1 eigenstate of M using fault-tolerant operations. The resulting +1 
eigenstate is either (/ + M)\tp) or (/ + M)Q\iji), which can be written jointly as (/ + M)Q a \tp) for a = or 1. 
Proof: We have shown that we can project an arbitrary encoded state onto (/ ± M)\ip), the ±1 eigenstate of M. 
If the resulting state is (/ -I- M)\ip), we are done; otherwise, we apply Q £ C 2 fault-tolerantly to (/ — M)\ip). Since 
Q anticommutes with M, it transforms the —1 eigenstate of M to a +1 eigenstate of M as follows: Q(I — M)\tp) — 
(I + M)(Q\ip)). Thus, we can always obtain a +1 eigenstate of M, which is (/ + M)Q a \ip) for a = or 1. 

Next we will show that a special class of quantum states can be created fault-tolerantly. 
Lemma 3: If St(|-0)) = {Mi, . . . ,M n } C C 2 and VA/; G St(\ip}) there exists Q, G C 2 such that {Mi,Qi} = 0, and 
[M^ Qj] = for i 7^ j, then \tp) can be created fault-tolerantly by measuring the elements in St(|^)) fault-tolerantly. 
Proof: By Lemma 1, Vi, M 2 = I. Starting from any encoded state \<j>), we measure Mi, . . . , M n sequentially, and 
after each measurement we apply the corresponding operation Qi if the projected state is the —1 eigenstate of M,-. 
By Lemma 2, the resulting state is 

|V;> = (/ + M„)Q«« ■••(/ + MOQ? 1 \4>) (B4) 
= (/ + M n ) -..(/ + M X )Q»" • • • QT \4>) , (B5) 

where a* = or 1, and we have used the fact that [Mj, Qj] — for i 7^ j. As [Mi,Mj] — 0, it is easily verified that 
Vi, Mi\ip) — \tp), and is the desired state that has been created fault-tolerantly. 



Theorem 1 in Sec [II A immediately follows: 
Theorem 1: \/U 6 C3, U can be applied to the encoded |0)® n state using C 2 operators and fault-tolerant measurement 
of C 2 operators. 

Proof: Applying U £ C3 to the encoded |0)® n state is equivalent to preparing the state \ip) — C/dO)®"), which 
has stabilizers M, = UZiW for i = 1, ...,n. Define = UXiU^ £ C 2 for each z. Then {Zi,Xi} — implies 
{M i; Qi} = U{Zi,X t }W = 0, and for i ^ j, \Z h Xj] = implies [M i; Qj] = U\Z h Xj\\J^ = 0. Thus by Lemma 3, the 
state \tp) can be created fault-tolerantly. 



2. Examples 

To prepare a specific encoded state from an unknown encoded state we need to measure all its independent stabilizers. 
When the initial state is a known encoded state related to the desired state, we may not have to measure all the inde- 
pendent stabilizers. For instance, given two encoded states \4>) and \4>') with St(|</))) = {Mi, . . . , Mfe, Mfc+i, . . . , M n } 
and St{\(j>')) = {Mi, . . . , M k , M' k+1 , M' n }, the following state 

(/ + M n ) ■••(/ + M k+1 )Q%> ■ ■ ■ Q a k X\ l (B6) 

is the simultaneous +1 eigenstate of Mj for i = 1, . . . ,n. Thus, starting from \(f>'), we can prepare the encoded state 
\<f>) by measuring only the n — k different stabilizers. In the following, we will construct an initial state, with which, 
the desired state can be obtained by measuring only a single stabilizer. 
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Assume we want to prepare the encoded state \ip + ) — U(\0)® n ) for U G C3. Define Mj and Qi for z = 1, . . . ,n as 
in the proof of Theorem 1. Then Qi\ip + ) is a —1 eigenstate of M, such that (^_|_|Q,-| , 0_)_) = 0, and the following state 

W = ^|(lV>+> + «+» (B7) 

is different from |^ + ) by only one independent stabilizer: Qj has replaced Mj. Therefore, the state also satisfies 
the conditions of Lemma 3, and can be prepared fault-tolerantly. It follows that to obtain the state we only 

need to measure the single stabilizer Mj on 

To prepare an encoded state |^>+) by preparing \tp) first can be simpler than directly preparing from an 

arbitrary encoded state if \ip) itself can be prepared easily. For instance, when \ip) is a product state, it can be 
prepared by measuring only single qubit operators. We will describe how to prepare the required ancilla states for 



the three gates in Sec. IV. When the required ancilla \ip+) is an entangled state with multiple-qubit stabilizers, we 



will construct it by preparing an easier state \tp) first. 

a. Fault-tolerant preparation of the ancilla required for T gate 

The required ancilla for constructing the it/ 8 gate, T, is 

10) +e"/ A \l) 

|V> + )=TF10)= |U;+ ^_ 1 ; , (B8) 

with stabilizer 

M = (TH)Z(TH)t = e- l7T,i SX , (B9) 

which anticommutes with (TH)X(THy = Z. Then starting from any encoded state, we can measure M, and apply 
Z if the projected state is the —1 eigenstate, to create the state \ip+) fault-tolerantly. 

b. Fault-tolerant preparation of the ancilla required for controlled-phase gate 

The required ancilla for constructing the controlled phase gate is 

\$+) = ki{S){Hi®Hi)pS) (BIO) 
= i(|0Q) + |01) + |10)+i|ll)) l (Bll) 

with stabilizers M; = Ai(S')(ifi ® H 2 )Z i {H l <g> H 2 )A 1 (S^) for i = 1,2. Using Eqs. (0)-©, 

My = {X\ ® S 2 )A(Z) , (B12) 
M 2 = (Si ® X 2 )A(Z) . (B13) 

The corresponding operator that anticommutes with Mi is Qt = Ai(S)(Hi ® H2)Xi(Hi ®H%)Ai(S^) = Z% for i = 1,2. 
\ip+) is an entangled state, and both of Mi and M 2 are two-qubit operators. But the following state 

IVH-^hM + QrKM) (B14) 
= -L|0>(|0) + |l» (B15) 

is a product of single qubit states and has stabilizers Z\ and X 2 . Thus, we can first prepare \ip) fault-tolerantly by 
measuring Z\ and X 2 , and then measure Mi alone to get the state \ip+). Equivalently, we can also first prepare the 
state ^75(1^+) + Q2IVM-)) — d") wmc h has stabilizers X 2 and Z\, and measure M 2 to obtain the state 
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c. Fault-tolerant preparation of the required ancilla for the Toffoli gate 



The required ancilla for the Toffoli gate construction is 

\<iP+) = U{H 1 ^H 2 )\000) (B16) 
= |(|000) + |010} + |100) + |111>) , (B17) 

where U is the Toffoli gate. The stabilizer of this state is M, = U(Hi (g> H 2 )Zi(Hi ® H 2 )W for i = 1,2, and 3. Using 
Eqs. 

Mi =Xi® CNOT 23 , (B18) 
M 2 = X 2 <g> CNOT13 , (B19) 

M 3 = Z 3 ® cz 12 , (B20) 

where cz represents a controlled-Z, and the ordered subscripts for CNOT and CZ specifies the control and target bits. 
The operator that anticommutes with Mi is Qi = U{H\ ® H2)Xi(Hi ® H 2 )U\ or Zi, Z 2 and A3 for i = 1,2, and 3, 
respectively. Again, each of M< is a two-qubit operator, but the following state 

IV^> = + Qi|V+» = ^l°XI > + 1 1 ))! ) (B21) 

can be prepared easily by measuring its stabilizers Zi,X 2 and Z3. Then we only need to measure a single two- 
qubit operator M\ on \ip) to obtain \tp+). Equivalently, we can also first prepare the state = + Q2)\ip+) 
with stabilizers X\, Z 2 and Z3 or the state \tp) = + Q3j\4 } +) with stabilizers Xi, X 2 and X3, and measure the 
corresponding single stabilizer to obtain \ip+). 

3. Recursive preparation 



In this subsection, we will prove the following Theorem, which is used in Sec. [II C: 
Theorem 2: The encoded state \ip) = UH® n (\0)® n ) for U € Ff. can be prepared fault-tolerantly by recursive 
application of one-bit teleportation. 

First we have the following Lemma, which is a generalization of Lemma 3. 
Lemma 4: \tp) can be created fault-tolerantly if given St(|^)) = {Mi, . . . , M n }, Vi, j 

(1) the cat-state-controlled- Mi can be performed fault-tolerantly; 

(2) there exists Qi such that Qi can be performed fault-tolerantly, {Mi, Qi} — 0, and for i 7^ j, [Mi, Qj] = 0. 
Proof: Since Mf = I, by applying the cat-state-controlled- Mj and measuring the cat state fault-tolerantly as before, 
we can project any encoded state onto ±1 eigenstate of M,*. Then apply Qi if a —1 eigenstate is obtained. Using the 
same argument as in the proof of Lemma 3, we can fault-tolerantly prepare the state 

Lemma 5: If operations in Fk-\ and cat-state-controlled-U for any V £ -Ffe-2 can be performed fault-tolerantly using 
the one-bit teleportation scheme, then C/-ff®™(|0)®™) for U £ Fk can be created fault-tolerantly. 
Proof: The stabilizers of \ip) = UH® n (|0)® n ) are Mi = UH® n Zi(UH® n Y = UX, t W = U x X, t for some U x £ F fc _i. 
Define Qi = UZiU^ = Zi. Qi satisfies condition (2) of Lemma 4. 

Since Mj = U x Xi, the cat-state-controlled- Mj is the product of cat-state-controlled-JTr and cat-state-controlled- 
Xi. The cat-state-controlled- ^ is easily performed fault-tolerantly. Thus it remains to show how to perform the 
cat-state-controlled- U x for U x £ F&_i fault-tolerantly. 

As U x £ Fk-i is constructed with one-bit teleportation scheme using the circuit of Eq. (|ll|), where Ai — H, Bi = I 
and Di — Xi, to perform cat-state-controlled-£/ x , we need to perform cat-state-controlled- -E, cat-state-controlled- 
U x XiW x , and to prepare the ancilla C/ XJ ff®"(|0)®") fault-tolerantly. As E £ C 2 and U x XiW x = U' x Xi with U' x £ F fe _ 2 , 
both of cat-state-controlled- E and cat-state-controlled-LTj-DiL/J can be performed fault-tolerantly. Next, the state 
U x H® n \0)® n has stabilizers M[ = U x X l W x = U' x X l with U' x £ F k _ 2 , which satisfies both conditions of Lemma 4 
and can therefore be prepared fault-tolerantly. Thus cat-state-controlled-C/^, can be performed fault-tolerantly. This 
completes the proof of Lemma 5. 

In fact, what we have shown in the proof of Lemma 5 is that if operations in Fk—i and the cat-state-controlled-U 
for V £ Fk- 2 can be performed fault-tolerantly, then the cat-state-controlled-{7 for U £ Fk-i and operations in Fk 
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can be performed fault-tolerantly. This is because according to Sec. 1IIC, fault-tolerant construction of Fk gates only 
require fault-tolerant Fk-i gates and an ancilla UH® n (\0)® n ) for U G F k . 

Since both the operations in F2 and the cat-state-controlled-C/ for U G F\ can be performed fault-tolerantly, by 
induction, operations in F k and the cat-state-controlled-C/ for U G -Ffc-i can be constructed fault-tolerantly, with 
which we can fault-tolerantly prepare the encoded state £/-ff® n (|0)®™) for U G F^. 



APPENDIX C: ALTERNATIVE REMOTE CNOT CIRCUIT 

In this section, we re-derive the remote CNOT construction, given in ||, using one-bit teleportation. A remote CNOT 
between the states |a) and \(3) belonging to Alice and Bob, respectively, can be performed by a four step procedure: 
(1) Alice swaps her state |a) with an ancilla |0), (2) Alice sends the teleported |a) to Bob using A-teleportation, (3) 
Bob applies CNOT from \a) to \/3), and (4) Bob teleports |cv) back to Alice using Z-teleportation. Steps (2) and (4) 
involve prohibited operations. Here is a circuit representation: 




(CI) 



|/3 e a} 



The two prohibited CNOTs are labelled with asterisks. They can be commuted backwards to obtain the equivalent 
circuit: 



|a>- 
|0> 



CD CD 



l°> — L^h 



-l/?>- 



@ — ®- 



(C2) 



® \x\ 



1/3® a) 



which again reduces prohibited operations to some specific shared entangled state. 
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